Instructions: FED-LOGIN – Register the Access App

: FED-LOGIN Access

The FED-LOGIN Access app is the convenient and secure login method if you have a Federal Administration smart card and want to use FED-LOGIN to log in from a device that does not support your smart card.

FED-LOGIN Access app – Who can use it?

Do you already use FED-LOGIN as a way of logging in and accessing Federal Administration applications as part of your job or contract? Do you already have a Swiss Government PKI (SG PKI) smart card enabling you to use FED-LOGIN? Then the FED-LOGIN Access app offers you some interesting options.

FED-LOGIN Access app – Why do I need it?

The FED-LOGIN Access app is a convenient and secure login method if you want to use your federal identity to log in via FED-LOGIN, and are using a device that does not support your smart card. This could be a smart phone, tablet, PC without card reader or a mobile VDI solution, for example.

The FED-LOGIN Access app can be used as follows:

Login from the web browser of the mobile device on which the access app is installed. For this purpose, the app has a function allowing use on the same device. On mobile devices, you can save your preference to always use the FED-LOGIN Access App for authentication with FED-LOGIN. The Access App will then be automatically selected as your login method each time you sign in.
Please note that the pop-up asking the user to confirm whether the FED-LOGIN Access app may be opened is a function of the smartphone's operating system and cannot be skipped.
Login from the web browser on a different device to the one on which the access app is installed. For this purpose, the app has a function for scanning a login QR code which is displayed by FED-LOGIN.

FED-LOGIN Access app – What is it?

The FED-LOGIN Access app is a mobile app for devices with Apple iOS or Google Android operating systems. It is available from the official app stores (Apple App Store/Google PlayStore). It can therefore be downloaded by anyone and installed on any device that meets the minimum operating system requirements. During registration, the FED-LOGIN Access app generates a key pair that is comparable to the private and public keys for your smart card's certificate. The private key is store securely on your device in a special storage area, while the public key is saved under your FED-LOGIN account. To prevent unauthorised use of the FED-LOGIN Access app on your device, access to the key is additionally secured using biometrics (Face ID or Touch ID for each device – fallback to device PIN) or a PIN set by you in the FED-LOGIN Access app.

FED-LOGIN Access app – What must I do in order to use it?

To use the FED-LOGIN Access app, you need to perform two simple steps. We have described them here for you.

Download the FED-LOGIN Access app from the App Store and install it on your mobile device.
Log into eIAM MyAccount with your smart card and register the FED-LOGIN Access app.

FED-LOGIN Access Systèmes d’exploitation et exigences techniques

Installing and registering the FED-LOGIN Access app

Click the MyAccount link and select the FED-LOGIN tile.

eIAM – Login selection
Go to the Login & Security tab.
If your current authentication is not strong enough to manage login methods, for example when using Active Directory Single Sign-On, a corresponding message will inform you. The button provided allows you to log in using strong authentication.
Click the Strong authentication button and select the FED-LOGIN tile again in the eIAM login selection.

Login & Security
Log in using a strong login method of your choice.
- Smartcard
- Previously registered FED-LOGIN Access App
- Previously registered security key

FED-LOGIN strong login methods
Go to the Login & Security tab. In the FED-LOGIN Access App tile, click Register.
Using the device on which you want to install the FED-LOGIN Access App, scan the QR code that matches your operating system. Alternatively, search for the “FED-LOGIN Access” app in your device’s app store. Once the installation on your mobile device is complete, click Continue in MyAccount.
Open the FED-LOGIN Access App on your mobile device and select Scan QR code in the app. If your device’s operating system asks for permission to access the camera, you must allow access. Then point your device’s camera at the displayed QR code.
The FED-LOGIN Access App will now ask you to select an authentication method. This protects the app against use by unauthorised persons and ensures that only you, as the authorised user, can use the app for login.

Select the desired authentication method on your mobile device:
1. PIN authentication - Set a PIN. This PIN is independent of your device PIN.
2. Face ID / Touch ID - This biometric method is recommended because it is both convenient and secure. If biometric authentication cannot be used during a later login, the app will ask you to enter the device PIN.
Once the authentication method has been set up, a confirmation message appears.
To finish, click Back to Login & Security.
Your FED-LOGIN Access App is now registered.

You can now also use your FED-LOGIN outside the federal network without a Smartcard, using your registered FED-LOGIN Access App.

Outside the federal network, log in from a private device without using a Smartcard by means of your FED-LOGIN Access App. This also allows access to data with increased protection requirements (QoA50).

: FED-LOGIN strong login methods

You can register up to five FED-LOGIN Access Apps on different mobile devices.

Important notice
If you lose your mobile device, delete the FED-LOGIN Access app on your mobile device, manually delete your account in the FED-LOGIN Access app, or reset all data and settings in the FED-LOGIN Access app (option under Settings menu), you may have to reinstall the app, and you must in any case reregister in MyAccount.

Frequently asked questions

How can I add the second authentication method (PIN or Face ID/Touch ID)?

Click on the link MyAccount

, select the FED-LOGIN tile and log in with your smart card.

Click on "Register" and click through the menu (2x "Continue" without selecting anything else) until the QR code appears on the screen. Using the app that is already registered and installed on your mobile device, scan the QR code on the screen in MyAccount. You can now enter the missing second authentication method. Your FED-LOGIN Access app now supports both authentication methods and offers you a choice when you log in.

How can I rename my registered mobile device?

You can change your mobile device's displayed name only via the FED-LOGIN Access app on the device itself. Renaming can be useful for managing multiple devices in MyAccount. In particular, if you have registered more than one device, it is easier to tell the different devices apart for management purposes. To do this, open the FED-LOGIN Access app on your device and click on the cogwheel symbol at top right. This takes you to the app settings. Under "DEVICE", click on the field with the current device name. You can now enter the desired name for the mobile device and confirm it.

I have accidentally deleted an account in the FED-LOGIN Access app on my mobile device. What must I do to restore it?

You must reregister the FED-LOGIN Access app in MyAccount as described in these instructions.

How can I remove a registered mobile device?

To delete a mobile device, please follow the instructions:

FED-LOGIN - Removing an Access App account

I have entered the incorrect PIN five times, and now I can no longer use the FED-LOGIN Access app

If PIN verification fails five times, you will have to delete your account in the FED-LOGIN Access app and reregister the app for this mobile device in MyAccount. See also "How can I add the second authentication method (PIN or Face ID/Touch ID)?"

What must I do if the FED-LOGIN Access app stops working?

The FED-LOGIN Access app is an alternative login method to your smart card. If you have problems with the FED-LOGIN Access app, you can delete it from your mobile device, reinstall it and reregister it at any time.

What must I do if I replace my mobile device?

Delete the FED-LOGIN Access app account on your old mobile device as described in the instructions.

FED-LOGIN - Removing an Access App account

Install the FED-LOGIN Access app on your new mobile device and register it as described in these instructions.

What must I do if I have reset or replaced my mobile device without having first deleted my accounts via the registered FED-LOGIN Access app?

Your first choice when deleting a registered FED-LOGIN Access app should always be the access app itself. If this is no longer possible, for example because the mobile device is faulty, you have accidentally deinstalled the app or for other reasons, you can also use MyAccount to delete registered FED-LOGIN Access apps. You can find the instructions under

FED-LOGIN - Removing an Access App account

Which options do I have for managing the accounts in the FED-LOGIN Access app?

Consult the Help in the FED-LOGIN Access app FED-LOGIN Access app Help & Impressum

Use of the FED-LOGIN Access app for non-productive environments (acceptance/reference) (only for users who use FED-LOGIN in pre-production (REF / ABN))

The FED-LOGIN Access app for production (PROD) also supports the FED-LOGIN IdP in the acceptance environment (ABN) and reference environment (REF). However, registration must be done separately in the relevant MyAccount in PROD, ABN and REF.

You can access MyAccount in the non-productive environments via the following links:
MyAccount acceptance environment (ABN)
MyAccount reference environment (REF)

If you use more than one account, we recommend that you give your accounts distinctive names in the FED-LOGIN access app, for example by adding REF or ABN as a prefix. This will help you to avoid deleting the wrong account by mistake. The FED-LOGIN access app recognises which environment is being used for the login, and only shows you accounts from that environment.

Were we able to help you?